Who is responsible for your data
The data controller for everything described here is Nodegrove, a business run by its founder pending incorporation in Lithuania. Write to info@nodegrove.io about anything on this page. A person reads that address, not a ticketing system.
Incorporation in Lithuania is in progress, so the controller today is the founder personally rather than a company. That changes who is named here, not what happens to your data or what you can ask for. Company details are published as soon as registration completes, and you can request the operator's full legal identity at any time by writing to the address above.
If you join the waitlist
The form asks for one thing you have to give and one you do not.
| What | Why | Required |
|---|---|---|
| Your email address | To send you an invitation when one exists. Nothing else. | Yes |
| What you would run first | To decide which setup to support first in the pilot. | No |
| The page you signed up from, and which headline you saw | To learn which explanation of the product actually works. | Collected automatically |
| The site that referred you, if any | To know where people are finding us. | Collected automatically |
| Your country | Two letters, from the network. Used to plan which region to launch in. | Collected automatically |
| The date and time you signed up | To invite people roughly in order. | Collected automatically |
Our lawful basis
Consent, under Article 6(1)(a) of the GDPR. You give it by submitting the form, and you can withdraw it at any time by asking us to delete your entry — which we do, rather than marking a flag and keeping the row.
How long we keep it
Until one of three things happens: you ask us to delete it, you decline an invitation, or the pilot closes without us inviting you. In the last case everything is deleted within 30 days of us abandoning the waitlist. We do not keep a suppression list of deleted addresses, because that would mean keeping the address.
What we send you
An invitation, if one becomes available. Possibly one message before it, if something changes that you would obviously want to know — a launch date, or the project stopping. There is no newsletter, and there is no drip sequence. Every message has an unsubscribe link that works immediately.
If you only read the site
Reading a page here does not create an account, set a tracking cookie, or add you to anything.
- Analytics. Cloudflare Web Analytics, which is measured without cookies and without building a profile of you. It reports page views, referrers and coarse country — the same things a server log would show — and does not follow you to other sites. There is no other analytics on this site.
- Bot protection. The waitlist form is protected by Cloudflare Turnstile, which loads only on the page carrying the form. When you submit it, Cloudflare receives your IP address and some signals from your browser to judge whether you are a person. Turnstile does not track you across websites, and it is not present on any other page.
- Rate limiting. Your IP address is used in the moment to stop the form being flooded. It is not written to the database. The only location we store is the two-letter country.
- Server logs. Cloudflare keeps standard edge logs for a short period as part of running and protecting the service.
Cookies
This site sets no cookies of its own. There is no cookie banner because there is nothing to consent to. Cloudflare may set a strictly necessary cookie when its bot protection or security services are triggered; that one exists to keep the site available, not to profile you.
What we do not do
- We do not sell, rent or share your data with anyone for their own purposes.
- We do not use advertising or social media tracking pixels. There is no Meta pixel, no Google Ads tag, no LinkedIn Insight tag on this site.
- We do not store your IP address alongside your email.
- We do not build profiles, and nothing here makes automated decisions with a legal or similarly significant effect on you.
- We do not run the service yet, so there is no product data to speak about. When the pilot opens, what we can and cannot see inside a running environment is set out on where your data lives, and this notice is updated to match before anyone is charged.
Who else sees it
Two companies, for two narrow reasons.
| Who | What for | Where |
|---|---|---|
| Cloudflare, Inc. | Hosting, CDN, the waitlist database (D1), bot protection (Turnstile) and privacy-preserving analytics. | Global edge network, including the EU and the United States. |
| Google LLC | Serves the web fonts used by the site. Loading a font tells Google your IP address and browser. Being removed: the fonts are moving to our own server so this transfer stops. | Global. |
When the pilot begins we will use an infrastructure provider to supply the machines, and that provider will be named here and on where your data lives before anyone runs anything on it. We will not add a processor quietly.
Where your data goes
The waitlist database is created in Cloudflare's Eastern Europe (EEUR) region, so the only personal data we hold — your email address and the few fields listed above — is stored inside the EU rather than replicated worldwide. Cloudflare operates a global edge network, so a request from you may be served by a data centre near you, and Cloudflare is certified under the EU–US Data Privacy Framework and offers the European Commission's standard contractual clauses for anything that does leave the EEA. If we ever move the database out of this region, this paragraph changes in the same commit as the move.
Your rights, and how to use them
If the GDPR applies to you, you have the right to get a copy of your data, to correct it, to have it erased, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent at any time. Nothing here is conditional on you having an account or quoting a reference number.
Email info@nodegrove.io from the address you signed up with and say what you want. We reply within seven days and act within thirty, which is well inside the month the law allows. We do not charge for this and we do not make you justify it.
If we get it wrong, you can complain to a data protection supervisory authority. Our lead authority is the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija), and you may also complain to the authority in the country where you live or work — you do not have to come to ours.
Changes to this notice
The version date sits under the heading at the top. If we change anything that affects what we collect or who sees it, we change that date, and if you are on the waitlist when a material change happens, we email you rather than relying on you re-reading this page. Older versions are in the site's public git history.
Questions, or something here that does not match what you observe: info@nodegrove.io. Corrections are welcome and get made.